Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/3230312e37312e3132382e302f31382d3234203d3e203238363335.roa
File:                     3230312e37312e3132382e302f31382d3234203d3e203238363335.roa (raw, json)
Hash identifier:          p2lpjNqbVoAkysHUcxVkHdNmT4T6fK7bL20+qXLd/OI=
Subject key identifier:   20:36:49:4F:49:E4:0A:0D:F3:94:9F:BD:EF:3C:BE:22:60:DD:A7:28
Certificate issuer:       /CN=C48605CA0055701EE4F243531AAD2AC6C3350B55
Certificate serial:       10F315242C7C17793EDC5214FA9EBD9316E95571
Authority key identifier: C4:86:05:CA:00:55:70:1E:E4:F2:43:53:1A:AD:2A:C6:C3:35:0B:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C48605CA0055701EE4F243531AAD2AC6C3350B55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/3230312e37312e3132382e302f31382d3234203d3e203238363335.roa
Signing time:             Thu 05 Oct 2023 19:24:37 +0000
ROA not before:           Thu 05 Oct 2023 19:19:37 +0000
ROA not after:            Thu 03 Oct 2024 19:24:37 +0000
asID:                     28635
IP address blocks:        201.71.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f3:15:24:2c:7c:17:79:3e:dc:52:14:fa:9e:bd:93:16:e9:55:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48605CA0055701EE4F243531AAD2AC6C3350B55
        Validity
            Not Before: Oct  5 19:19:37 2023 GMT
            Not After : Oct  3 19:24:37 2024 GMT
        Subject: CN=2036494F49E40A0DF3949FBDEF3CBE2260DDA728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:95:f5:ed:f3:f5:87:ba:4e:4b:44:33:61:97:
                    c2:24:a9:c6:69:dd:0e:2b:3b:98:63:df:c8:d9:bf:
                    a9:96:b5:4b:71:a2:df:c1:1d:ef:b2:8a:fc:26:0e:
                    16:91:d5:1d:8d:4b:3c:5e:fc:1d:dc:b0:54:5b:72:
                    dc:d1:5e:cf:e5:ae:8d:ea:04:77:6f:a4:ef:69:63:
                    2d:47:e1:19:af:fa:15:31:f6:88:c0:39:28:45:f9:
                    34:75:b9:17:fc:c1:be:72:e1:75:fc:fe:16:03:67:
                    47:89:7a:dd:c1:c0:c8:37:a2:d0:e2:20:1d:03:c6:
                    55:19:b6:60:45:17:74:eb:32:4a:40:2b:cd:3e:32:
                    b5:b8:70:06:de:1a:8a:34:70:5d:e9:da:a1:66:08:
                    ae:85:81:57:17:8f:d9:b5:84:e9:22:6d:b4:d1:ec:
                    1b:c4:58:ad:c0:80:29:e8:78:33:ab:1b:b8:a0:36:
                    e8:8e:5e:58:9b:f6:cb:8a:90:6b:1d:72:0a:06:75:
                    c6:c9:cc:0c:76:46:00:c0:c8:4e:18:64:1d:47:97:
                    48:4e:d0:c9:0f:5d:96:47:fd:cd:28:ca:1d:d8:2b:
                    55:e4:15:50:dc:8b:ed:11:80:38:d5:69:ce:4c:88:
                    75:c5:47:47:18:85:89:70:a6:1d:cc:f6:82:fd:40:
                    4a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:36:49:4F:49:E4:0A:0D:F3:94:9F:BD:EF:3C:BE:22:60:DD:A7:28
            X509v3 Authority Key Identifier:
                keyid:C4:86:05:CA:00:55:70:1E:E4:F2:43:53:1A:AD:2A:C6:C3:35:0B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/C48605CA0055701EE4F243531AAD2AC6C3350B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C48605CA0055701EE4F243531AAD2AC6C3350B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728u5nXJfdK9ogQL1bYvLsf8BqTVyjB511A14TwQ7Akk/0/3230312e37312e3132382e302f31382d3234203d3e203238363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6d:8c:8b:ab:97:4a:6b:5a:99:d7:80:d2:7b:ac:43:a5:4a:b3:
         6c:93:72:a2:54:0c:61:24:39:51:68:05:96:ae:5e:ce:a1:e0:
         5c:91:7b:0d:8b:79:c4:29:b2:ba:b6:9d:d1:7f:fd:d1:1a:2c:
         28:e9:2e:c2:97:53:60:20:38:3b:c3:18:03:3e:6e:35:06:93:
         10:1b:87:be:0e:90:be:de:7b:7b:8a:ca:2a:5b:08:99:de:98:
         81:77:04:10:89:69:8c:6a:ec:b8:88:9c:41:85:f4:12:93:8c:
         91:a8:e9:ac:9d:f6:bd:7f:3c:77:fe:0e:c5:9d:85:53:d1:63:
         63:ec:dc:7c:03:f6:4f:4f:e8:1e:97:cb:e1:fc:4b:9a:a9:ea:
         13:b7:fb:16:4a:a6:3e:7c:0f:15:69:71:a0:f8:1c:66:f7:eb:
         03:d1:48:f7:d3:20:26:f4:11:82:67:f1:d0:cf:3e:3b:a3:e8:
         c6:f5:92:93:2d:15:2a:82:e8:67:fe:78:1b:1f:d2:f6:10:55:
         9d:9d:5b:74:72:8d:64:d3:9d:f6:bb:a5:18:bc:01:aa:6b:3c:
         0e:65:d9:ef:91:95:07:8e:4a:d4:c1:6b:21:51:75:37:f9:ec:
         14:af:38:35:8e:f9:a2:b5:9f:1f:54:77:a2:ec:97:24:dd:a8:
         1a:2a:03:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org